A trusted data space system based on blockchain

Abstract

The present invention relates to a trusted data space system based on blockchain, including a data layer, a service layer, an application layer and a supervision layer; the data layer is responsible for the storage and management of data, and uses blockchain technology to ensure the integrity and credibility of data; the service layer provides data sharing, exchange, and analysis services, and uses privacy computing and federated learning technology to protect data privacy; the application layer provides data query, analysis, and visualization functions for end users; the supervision layer is responsible for monitoring and managing the entire system to ensure the compliance and security of the system. The present invention has the advantages of decentralization and high security.

Description

Technical Field

[0001] The present invention relates to the technical field of data sharing, and in particular to a trusted data space system based on blockchain. Background Art

[0002] There are unreliable issues in the sharing and circulation of data elements, which are reflected in many aspects. These problems seriously restrict the healthy development of the data market; they include the following issues:

[0003] 1. Lack of data security and privacy protection: During the data circulation process, an untrustworthy network environment may lead to risks such as data leakage and data tampering, thereby causing data infringement, data abuse and other problems; user data privacy is often ignored or abused.

[0004] 2. Unclear definition of data ownership: Data is non-exclusive and reproducible, which makes it difficult to define and protect data ownership.

[0005] 3. Imperfect data circulation mechanism: The current market lacks efficient and reliable data circulation technology, resulting in high costs, low efficiency and greater risks in data transactions; it is often difficult for both supply and demand parties to establish a relationship of mutual trust.

[0006] 4. Data quality varies: In data circulation, there is a large amount of low-quality data such as forged data and inferior data, which reduces the credibility and value of data circulation.

[0007] To solve these problems, we need to address the lack of trust across entities in complex supply and demand relationships and the untrustworthy issues in the sharing and circulation of data elements. We need to make breakthroughs in trusted data computing and sharing technologies based on blockchain, privacy computing, and federated learning, build a scalable data governance consensus mechanism, propose a comprehensive security strategy for cross-data operations, develop autonomous and controllable trusted data space technology and application software based on blockchain, and carry out application demonstrations in typical industries such as logistics, finance, insurance, transportation, and energy. Summary of the invention

[0008] In view of the above-mentioned deficiencies in the prior art, the technical problem to be solved by this patent application is how to provide a decentralized, highly secure, trusted data space system based on blockchain.

[0009] In order to solve the above technical problems, the present invention adopts the following technical solutions:

[0010] A trusted data space system based on blockchain, including a data layer, a service layer, an application layer and a supervision layer; the data layer is responsible for data storage and management, and uses blockchain technology to ensure the integrity and credibility of data; the service layer provides data sharing, exchange, and analysis services, and uses privacy computing and federated learning technologies to protect data privacy; the application layer provides data query, analysis, and visualization functions for end users; the supervision layer is responsible for monitoring and managing the entire system to ensure the compliance and security of the system.

[0011] As an optimization, the functional modules of the data layer include: privacy computing, federated learning, data storage, data governance, data fusion, data sandbox, and blockchain; the decentralization, immutability and traceability of blockchain are utilized to ensure the integrity and credibility of the data.

[0012] As an optimization, the functional modules of the service layer include data sharing, data exchange, data analysis, and data security.

[0013] As an optimization, the functional modules of the application layer include data visualization dashboard, data query, data analysis and calculation, and centralized data management.

[0014] As an optimization, the functional modules of the regulatory layer include data directory, authentication center, audit center, and application market.

[0015] As an optimization, the construction of the blockchain network includes the following steps: A1: Node deployment: Deploy blockchain nodes between participants to form a blockchain network; A2: Consensus mechanism selection: Select a suitable consensus mechanism based on network scale and performance requirements; A3: Smart contract development: Develop smart contracts based on business needs, define rules for data transactions, access control, and revenue distribution, and deploy them on the blockchain;

[0016] The consensus mechanism selected in step S2 includes but is not limited to PoS (Proof of Stake), DPoS (Delegated Proof of Stake), and PBFT (Practical Byzantine Fault Tolerance).

[0017] As an optimization, the steps of privacy computing and federated learning are as follows: B1: Data preprocessing: perform preprocessing operations such as cleaning, desensitizing, and encryption on the data, and use secure multi-party computing technology to perform joint calculations without leaving the local data; B2: Federated learning model training: Participants train the model locally and encrypt the model parameters and upload them to the blockchain or central server. The central server or blockchain network aggregates the model parameters, updates the global model, and distributes it back to each participant. The above process is repeated until the model converges or reaches the preset training rounds.

[0018] As an optimization, data sharing and circulation include the following steps: C1: Data registration and chain-up: register the metadata of the data on the blockchain to achieve data traceability and transparency; use the distributed ledger characteristics of the blockchain to record the flow history and access records of the data; C2: Access control and authorization: implement data access control and authorization management through smart contracts to ensure that only authorized users can access specific data; use encryption technology and identity authentication technology to ensure the security of data transmission and access; C3: Data trading and settlement: use the smart contract function of the blockchain to realize the automation of data transactions and the transparency of settlement; set the price and settlement method of data transactions to ensure that data providers can obtain reasonable benefits.

[0019] The present invention has the following advantages:

[0020] 1. Innovative architecture integrating multiple technologies:

[0021] Blockchain technology: Using its decentralized, tamper-proof and transparent characteristics, it provides a trust basis for data sharing and ensures the authenticity and traceability of data transactions;

[0022] Privacy computing: Through technologies such as homomorphic encryption and differential privacy, joint computing and value mining of data are achieved without leaking data to third parties, solving the problem of privacy protection in data sharing.

[0023] Federated learning: allows different data sources to jointly train machine learning models without directly exchanging data, improving the efficiency and security of data utilization;

[0024] This multi-technology integration solution not only leverages the advantages of each technology, but also solves complex problems that are difficult to handle with a single technology through complementarity.

[0025] 2. Scalable data governance consensus mechanism:

[0026] Designing a data governance consensus mechanism that can dynamically adapt to different scenarios, different data scales, and the needs of different participants is the key to achieving efficient, fair, and reliable data sharing. The mechanism needs to be able to balance the rights and interests of data contributors, the needs of data users, and the overall performance of the system to ensure the sustainability and scalability of data sharing and circulation.

[0027] 3. Comprehensive security strategy across data operations:

[0028] A full range of security strategies are proposed and implemented for each link of data collection, storage, processing, transmission, and sharing, including but not limited to access control, data encryption, identity authentication, anomaly detection, etc. These strategies are designed to ensure the security, integrity, and availability of data throughout its life cycle, and reduce the risks of data leakage and tampering. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] Figure 1 This is a system framework diagram of a blockchain-based trusted data space system described in the present invention. DETAILED DESCRIPTION

[0030] The present invention is further described in detail below in conjunction with the accompanying drawings. In the description of the present invention, it should be understood that the directions or positional relationships indicated by directional words such as "upper, lower" and "top, bottom" are usually based on the directions or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present invention and simplifying the description. Unless otherwise stated, these directional words do not indicate or imply that the devices or components referred to must have a specific direction or be constructed and operated in a specific direction, and therefore cannot be understood as limiting the scope of protection of the present invention; the directional words "inside and outside" refer to the inside and outside relative to the contours of each component itself.

[0031] like Figure 1 As shown, a trusted data space system based on blockchain includes a data layer, a service layer, an application layer and a supervision layer; the data layer is responsible for the storage and management of data, and uses blockchain technology to ensure the integrity and credibility of data; the service layer provides data sharing, exchange, and analysis services, and uses privacy computing and federated learning technologies to protect data privacy; the application layer provides data query, analysis, and visualization functions for end users; the supervision layer is responsible for monitoring and managing the entire system to ensure the compliance and security of the system.

[0032] In this embodiment, the functional modules of the data layer include: privacy computing, federated learning, data storage, data governance, data fusion, data sandbox, and blockchain; the decentralization, immutability and traceability of blockchain are used to ensure the integrity and credibility of the data.

[0033] Specifically, blockchain technology can serve as the trust foundation for data transactions, record the entire process of data transactions, and provide transparent records of data flow; automatically execute the conditions and logic of data transactions through smart contracts, reduce human intervention, and improve the efficiency and security of data transactions; allow secure calculations between multiple parties without exposing their respective original data. This technology can protect data privacy while achieving joint analysis and modeling of data; allow different data holders to train models locally and upload model parameters to a central server for aggregation, thereby building a global model without sharing original data. This method can effectively prevent data leakage and promote cross-organizational data cooperation.

[0034] Specifically, the core idea of ​​federated learning is to achieve "data remains unchanged but the model moves, data is available but invisible", and to reduce privacy risks during data transmission through distributed training methods.

[0035] The technical implementation of federated learning includes horizontal federated learning and vertical federated learning; the horizontal federated learning is applicable to the situation where there is a lot of overlap in user features but a little overlap in users, and the vertical federated learning is applicable to the situation where there is a little overlap in user features but a lot of overlap in users.

[0036] In this embodiment, the functional modules of the service layer include data sharing, data exchange, data analysis, and data security.

[0037] In this embodiment, the functional modules of the application layer include data visualization dashboard, data query, data analysis and calculation, and centralized data management.

[0038] In this embodiment, the functional modules of the regulatory layer include a data directory, an authentication center, an audit center, and an application market.

[0039] Specifically, the regulatory authorities introduce compliance reviews, security audits and regulatory mechanisms; compliance reviews ensure that the construction and operation of the system comply with relevant laws, regulations and policy requirements, and review the identities and data sources of the participants to prevent the influx of illegal data; security audits are regular security audits of the system to discover and address potential security risks, monitor and audit data usage, and prevent data abuse and leakage; the regulatory mechanism monitors and evaluates the operation of the system in real time and is responsible for the supervision and compliance of the system.

[0040] In this embodiment, the construction of the blockchain network includes the following steps:

[0041] A1: Node deployment: Deploy blockchain nodes between participants to form a blockchain network;

[0042] A2: Consensus mechanism selection: Select a suitable consensus mechanism based on network scale and performance requirements;

[0043] A3: Smart contract development: Develop smart contracts based on business needs, define rules for data transactions, access control, and revenue distribution, and deploy them on the blockchain;

[0044] The consensus mechanism selected in step S2 includes but is not limited to PoS (Proof of Stake), DPoS (Delegated Proof of Stake), and PBFT (Practical Byzantine Fault Tolerance).

[0045] Specifically, Proof of Work (PoW) is suitable for scenarios with high security requirements but high computing resource consumption; Proof of Stake (PoS) is suitable for reducing resource waste, but attention should be paid to the problem of power concentration; Delegated Proof of Stake (DPoS) improves transaction efficiency by electing proxy nodes through node voting, but it is necessary to guard against malicious node manipulation; Practical Byzantine Fault Tolerance (PBFT) is suitable for consortium chain scenarios and can reach consensus in the presence of some malicious nodes.

[0046] Specifically, when selecting the consensus mechanism in step S2, DPoS is suitable for small to medium-sized networks with high requirements for transaction speed; PoS and PBFT are suitable for large-scale networks with high requirements for throughput and latency; PoS is suitable for scenarios where the degree of decentralization is the primary consideration.

[0047] Specifically, to achieve dynamic scalability, a mechanism is designed to support dynamic joining and exit of nodes to ensure that the system can dynamically expand as the number and type of devices change; the consensus mechanism of the blockchain is used to ensure the consistency of data between nodes and improve the scalability and stability of the system.

[0048] In this embodiment, the steps of privacy computing and federated learning are as follows:

[0049] B1: Data preprocessing: Clean, desensitize, and encrypt data, and use secure multi-party computing technology to perform joint computing without leaving the local data.

[0050] B2: Federated learning model training: Participants train the model locally and encrypt the model parameters and upload them to the blockchain or central server. The central server or blockchain network aggregates the model parameters, updates the global model, and distributes it back to each participant. The above process is repeated until the model converges or reaches the preset training rounds.

[0051] In this embodiment, data sharing and circulation includes the following steps:

[0052] C1: Data registration and blockchain: Register the metadata of the data on the blockchain to achieve data traceability and transparency; use the distributed ledger feature of the blockchain to record the data flow history and access records;

[0053] C2: Access control and authorization: Implement data access control and authorization management through smart contracts to ensure that only authorized users can access specific data; use encryption technology and identity authentication technology to ensure the security of data transmission and access;

[0054] C3: Data transaction and settlement: Use the smart contract function of blockchain to realize the automation of data transactions and transparency of settlement; set the price and settlement method of data transactions to ensure that data providers can obtain reasonable benefits.

[0055] Specifically, in step C2, encryption technologies include TLS / SSL protocol, role-based access control (RBAC), and attribute-based encryption (ABE); identity authentication technologies include password authentication and electronic signature.

[0056] Specifically, data classification and encryption are implemented, data is classified in fine detail, corresponding encryption strategies are formulated according to the sensitivity and importance of the data, and high-strength encryption algorithms are used to encrypt, store and transmit data to ensure the security of data during transmission and storage.

[0057] Specifically, set up access control and permission management, set different security areas and access permissions, and ensure that each user can only access the data necessary to complete the work; introduce a multi-factor authentication mechanism to enhance account security.

[0058] Specifically, we will implement real-time monitoring and anomaly detection, establish a real-time monitoring mechanism, and monitor data flow and access behavior in the enterprise network in real time; use advanced analysis technology to identify abnormal behavior and promptly discover potential internal threats and external attacks.

[0059] Finally, it should be noted that those skilled in the art may make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims and their equivalents, the present invention is intended to include these modifications and variations.

Claims

1. A trusted data space system based on blockchain, characterized in that: It includes data layer, service layer, application layer and supervision layer; the data layer is responsible for data storage and management, and uses blockchain technology to ensure the integrity and credibility of data; the service layer provides data sharing, exchange, and analysis services, and uses privacy computing and federated learning technologies to protect data privacy; the application layer provides data query, analysis, and visualization functions for end users; the supervision layer is responsible for monitoring and managing the entire system to ensure the compliance and security of the system.

2. According to claim 1, a trusted data space system based on blockchain is characterized in that: The functional modules of the data layer include: privacy computing, federated learning, data storage, data governance, data fusion, data sandbox, and blockchain; the integrity and credibility of the data are ensured by utilizing the decentralization, immutability and traceability of blockchain.

3. A blockchain-based trusted data space system according to claim 2, characterized in that: The functional modules of the service layer include data sharing, data exchange, data analysis, and data security.

4. A blockchain-based trusted data space system according to claim 3, characterized in that: The functional modules of the application layer include data visualization dashboard, data query, data analysis and calculation, and centralized data management.

5. A blockchain-based trusted data space system according to claim 4, characterized in that: The functional modules of the regulatory layer include data directory, authentication center, audit center and application market.

6. A blockchain-based trusted data space system according to claim 5, characterized in that: The construction of the blockchain network includes the following steps: A1: Node deployment: Deploy blockchain nodes between participants to form a blockchain network; A2: Consensus mechanism selection: Select a suitable consensus mechanism based on network scale and performance requirements; A3: Smart contract development: Develop smart contracts based on business needs, define rules for data transactions, access control, and revenue distribution, and deploy them on the blockchain; The consensus mechanism selected in step S2 includes but is not limited to PoS (Proof of Stake), DPoS (Delegated Proof of Stake), and PBFT (Practical Byzantine Fault Tolerance).

7. A blockchain-based trusted data space system according to claim 6, characterized in that: The steps of privacy computing and federated learning are as follows: B1: Data preprocessing: Clean, desensitize, and encrypt data, and use secure multi-party computing technology to perform joint computing without leaving the local data. B2: Federated learning model training: Participants train the model locally and encrypt the model parameters and upload them to the blockchain or central server. The central server or blockchain network aggregates the model parameters, updates the global model, and distributes it back to each participant. The above process is repeated until the model converges or reaches the preset training rounds.

8. A blockchain-based trusted data space system according to claim 7, characterized in that: Data sharing and circulation includes the following steps: C1: Data registration and blockchain: Register the metadata of the data on the blockchain to achieve data traceability and transparency; use the distributed ledger feature of the blockchain to record the data flow history and access records; C2: Access control and authorization: Implement data access control and authorization management through smart contracts to ensure that only authorized users can access specific data; use encryption technology and identity authentication technology to ensure the security of data transmission and access; C3: Data transaction and settlement: Use the smart contract function of blockchain to realize the automation of data transactions and transparency of settlement; set the price and settlement method of data transactions to ensure that data providers can obtain reasonable benefits.

Images